From c37e56bc6baafbd63d6dc958edf2ac6ffe66b8aa Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Tue, 13 Jan 2026 01:34:19 +0000
Subject: [PATCH] fix: packages/email-server/package.json to reduce
 vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-MYSQL2-6591085
- https://snyk.io/vuln/SNYK-JS-NEXT-9508709
- https://snyk.io/vuln/SNYK-JS-MYSQL2-6861580
- https://snyk.io/vuln/SNYK-JS-MYSQL2-6670046
- https://snyk.io/vuln/SNYK-JS-AXIOS-9292519
- https://snyk.io/vuln/SNYK-JS-LUXON-3225081
- https://snyk.io/vuln/SNYK-JS-AXIOS-6032459
- https://snyk.io/vuln/SNYK-JS-AXIOS-9403194
- https://snyk.io/vuln/SNYK-JS-FASTIFY-9788069
- https://snyk.io/vuln/SNYK-JS-MYSQL2-6591084
- https://snyk.io/vuln/SNYK-JS-MYSQL2-6591300
- https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116
- https://snyk.io/vuln/SNYK-JS-AXIOS-12613773
- https://snyk.io/vuln/SNYK-JS-AXIOS-6124857
- https://snyk.io/vuln/SNYK-JS-NODEMAILER-6219989
- https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-9789073
- https://snyk.io/vuln/SNYK-JS-FINDMYWAY-8055229
---
 packages/email-server/package.json | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/packages/email-server/package.json b/packages/email-server/package.json
index 1620a84c567..b2b79a52315 100644
--- a/packages/email-server/package.json
+++ b/packages/email-server/package.json
@@ -29,30 +29,30 @@
     "@fastify/autoload": "^5.0.0",
     "@fastify/cookie": "^8.3.0",
     "@fastify/env": "^4.1.0",
-    "@fastify/mysql": "^4.0.0",
+    "@fastify/mysql": "^4.2.0",
     "@fastify/sensible": "^5.0.0",
-    "@mailchimp/mailchimp_transactional": "^1.0.50",
+    "@mailchimp/mailchimp_transactional": "^1.0.59",
     "@types/cron": "^2.0.0",
     "async": "^3.2.4",
     "axios": "^0.27.2",
     "bufferutil": "^4.0.7",
-    "canvas": "^2.10.2",
+    "canvas": "^3.0.0",
     "cron": "^2.1.0",
     "dotenv": "^16.0.3",
     "encoding": "^0.1.13",
-    "fastify": "^4.0.0",
-    "fastify-cli": "^5.5.1",
+    "fastify": "^4.29.1",
+    "fastify-cli": "^7.4.0",
     "fastify-cron": "^1.3.1",
     "fastify-plugin": "^4.3.0",
     "html-minifier": "^4.0.0",
-    "luxon": "^3.1.0",
+    "luxon": "^3.2.1",
     "mailing": "^0.8.12",
     "mailing-core": "^0.8.12",
-    "mjml": "^4.13.0",
+    "mjml": "^4.15.0",
     "mjml-react": "^2.0.8",
     "mysql2": "^2.3.3",
-    "next": "^v12.3.2",
-    "nodemailer": "^6.8.0",
+    "next": "^12.3.5",
+    "nodemailer": "^6.9.9",
     "nodemailer-postmark-transport": "^5.2.1",
     "octokit": "^2.0.10",
     "postmark": "^3.0.14",